Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401476.roa
File: AS401476.roa (raw, json)
Hash identifier: MSgILyuuLDdlVHL+0PH0VL7Ci986zA1qAJ75aNEzs+8=
Subject key identifier: F3:0B:34:66:C0:00:D0:C3:8B:8C:7F:AE:61:02:6F:E9:67:A5:D4:D4
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3E79B4BD3146802B0F44E79D7872A5A793D52F72
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401476.roa
Signing time: Tue 01 Sep 2026 13:49:31 +0000
ROA not before: Tue 01 Sep 2026 13:44:31 +0000
ROA not after: Tue 31 Aug 2027 13:49:31 +0000
asID: 401476
IP address blocks: 143.20.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:79:b4:bd:31:46:80:2b:0f:44:e7:9d:78:72:a5:a7:93:d5:2f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 1 13:44:31 2026 GMT
Not After : Aug 31 13:49:31 2027 GMT
Subject: CN=F30B3466C000D0C38B8C7FAE61026FE967A5D4D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:2b:e0:d9:a0:d0:24:34:fe:3f:f9:78:c7:
11:22:30:de:ff:78:a4:58:ec:75:8e:d5:e7:22:73:
32:a6:a5:07:3c:85:7d:44:ff:46:be:96:e7:0c:9e:
39:f1:a7:56:95:70:52:36:cc:32:b0:7b:45:f8:3a:
cc:32:4c:16:12:16:42:ec:07:ef:47:c1:c2:71:ce:
16:35:3f:8a:99:f6:98:79:4e:ed:b1:f2:51:b7:0c:
60:c0:3e:bc:73:95:d6:64:50:55:e0:02:13:2c:9c:
a4:9c:ed:93:bd:b9:98:d2:46:f2:46:d2:73:97:eb:
d2:03:bf:5e:c2:33:b5:78:8a:48:44:41:b8:30:2f:
ae:23:3d:64:d0:0c:fc:59:ab:bd:f1:f8:fb:c0:83:
3b:59:ae:7b:3f:1f:db:39:b3:cf:94:76:14:ab:c3:
be:8b:62:ac:2a:5d:e0:76:45:8f:bc:75:df:38:ef:
9a:2a:38:bd:c8:d3:e8:37:f1:a1:5e:05:22:4b:10:
7a:e8:d3:5b:1f:8f:e2:32:fc:05:b1:29:fc:b8:d5:
3c:97:47:5e:e3:b6:78:44:91:32:4c:72:c5:c3:e6:
7d:8a:6b:e7:ec:27:e6:e6:f4:2c:28:1a:9d:80:de:
9f:df:92:ff:ac:2a:a1:a7:61:d3:17:ee:18:8d:4f:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:34:66:C0:00:D0:C3:8B:8C:7F:AE:61:02:6F:E9:67:A5:D4:D4
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b4:67:c2:1e:11:c9:10:39:ee:c5:51:d9:47:bb:af:c0:da:
3f:60:cf:65:81:45:65:09:1f:cf:7b:83:13:38:91:aa:f9:66:
d9:b9:46:9d:40:3b:bd:9a:d6:b7:6f:8d:a9:7d:bd:a8:d8:4c:
d9:e4:e5:6c:33:b3:1c:02:03:4a:55:01:25:50:1b:50:1e:a5:
6e:80:05:ca:b9:36:84:fd:36:68:ff:8f:65:94:2a:97:9a:a0:
cb:a4:1d:42:ff:92:fd:ba:f6:0e:6b:9a:1d:f1:e1:f8:0d:7a:
9f:5d:13:3d:07:93:60:84:b6:d6:90:fc:bf:06:3f:28:52:84:
c8:9e:b4:13:93:e9:05:dd:d7:7e:6f:c9:60:14:1d:8b:2c:76:
65:2a:c1:4c:a8:d0:a4:bf:50:bc:16:ae:df:cb:1a:d4:f2:f4:
9e:52:fa:37:aa:7d:15:3b:51:6e:55:c7:ce:30:97:66:b0:2d:
a4:4b:b8:c2:54:8e:48:0c:c5:55:0a:29:39:6a:29:64:64:ca:
e9:d1:a2:e2:5a:37:f8:bb:b8:cc:f0:f4:63:48:b7:86:6f:66:
2d:a1:ba:af:d3:bd:26:e5:0b:da:84:9f:b9:5c:e5:f3:58:cd:
31:dd:c4:07:3f:7d:ae:3f:a3:14:d1:06:33:cb:ad:8a:f1:e2:
f2:bd:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:43:23 2026 by rpki-client